INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.50' (ECDSA) to the list of known hosts. 2018/04/20 17:38:34 fuzzer started 2018/04/20 17:38:34 dialing manager at 10.128.0.26:40315 2018/04/20 17:38:41 kcov=true, comps=false 2018/04/20 17:38:44 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x100000141842, 0x0) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f0000000480)='./bus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x1000, &(0x7f0000000740)=ANY=[]) r0 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c05, 0x0) 2018/04/20 17:38:44 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) 2018/04/20 17:38:44 executing program 7: socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x213}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x4e0, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x26, 0x0, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4), 0x2c) 2018/04/20 17:38:44 executing program 2: syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001540), 0x0, &(0x7f0000001640)={[{@errors_withdraw='errors=withdraw', 0x2c}]}) 2018/04/20 17:38:44 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006080)=[{{&(0x7f0000005f00)=@ipx, 0x8, &(0x7f0000006000), 0x0, &(0x7f0000000080)=""/51, 0xfffffffffffffda5}}], 0x53, 0x0, 0x0) 2018/04/20 17:38:44 executing program 4: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000080)=""/182) 2018/04/20 17:38:44 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x8) 2018/04/20 17:38:44 executing program 6: r0 = memfd_create(&(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='Z2\t'], 0x3) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000240), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000007060804002000fffc0c6565643b799365195f1b76"], 0x1000) syzkaller login: [ 44.899929] ip (3794) used greatest stack depth: 54408 bytes left [ 44.907605] ip (3793) used greatest stack depth: 54312 bytes left [ 45.846797] ip (3887) used greatest stack depth: 54200 bytes left [ 46.250891] ip (3922) used greatest stack depth: 53640 bytes left [ 46.313990] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.320489] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.356122] device bridge_slave_0 entered promiscuous mode [ 46.403991] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.410498] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.433672] device bridge_slave_0 entered promiscuous mode [ 46.450775] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.457290] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.467933] device bridge_slave_0 entered promiscuous mode [ 46.488786] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.495277] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.527119] device bridge_slave_0 entered promiscuous mode [ 46.562612] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.569136] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.594931] device bridge_slave_0 entered promiscuous mode [ 46.611445] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.617943] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.639244] device bridge_slave_1 entered promiscuous mode [ 46.649902] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.656404] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.666915] device bridge_slave_0 entered promiscuous mode [ 46.686903] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.693395] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.708151] device bridge_slave_1 entered promiscuous mode [ 46.717691] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.724175] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.742228] device bridge_slave_1 entered promiscuous mode [ 46.755345] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.761840] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.783940] device bridge_slave_0 entered promiscuous mode [ 46.805238] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.811738] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.831257] device bridge_slave_0 entered promiscuous mode [ 46.838808] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.845325] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.866945] device bridge_slave_1 entered promiscuous mode [ 46.877762] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.884247] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.910985] device bridge_slave_1 entered promiscuous mode [ 46.920294] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.929764] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.936229] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.946366] device bridge_slave_1 entered promiscuous mode [ 46.955837] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.965367] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.971893] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.000946] device bridge_slave_1 entered promiscuous mode [ 47.019071] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.028397] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.034877] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.076991] device bridge_slave_1 entered promiscuous mode [ 47.108944] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.119689] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.127259] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.138210] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.153140] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.177538] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.212833] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.281712] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.300126] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.376213] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.383842] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.394383] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.525403] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.094012] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.128589] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.212211] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.238801] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.290794] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.351874] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.368483] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.387125] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.410228] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.443680] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.471344] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.531843] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.600943] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.608192] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.691817] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.723252] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.233358] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.403760] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.411793] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.445459] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.500272] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.570292] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.582743] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.593754] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.601528] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.636987] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.692741] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.699924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.717893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.757016] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.764444] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.771699] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.796572] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.806213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.823786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.859646] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.873714] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.921724] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.931128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.945751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.982132] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.989791] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.000403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.023275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.044521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.059960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.074834] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.083822] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.091233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.099808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.118356] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.130885] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.138991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.173229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.198606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.231802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.242419] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.249598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.257924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.266979] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.282695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.291733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.302301] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.312835] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.322619] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.332595] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.346096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.368217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.420191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.457759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.488556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.504127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.512449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.520558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.565217] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.575489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.610289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.650892] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.662342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.697762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.422768] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.429260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.436167] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.442630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.478720] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.485274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.501256] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.507705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.514534] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.521007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.530078] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.679586] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.686138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.692967] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.699421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.714611] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.734242] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.740683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.747548] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.753997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.761846] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.771708] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.778175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.785064] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.791537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.824878] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.851415] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.857888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.864738] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.871197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.947983] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.009293] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.015770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.022609] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.029121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.081730] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.092161] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.098620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.105469] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.111912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.120419] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.536150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.548852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.585009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.614645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.633665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.658720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.681875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.574151] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.729933] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.900578] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.030272] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.083234] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.099153] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.123431] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.343281] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.349546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.365794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.587061] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.616538] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.622800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.633621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.715976] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.722249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.734589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.784291] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.795098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.805248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.875355] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.881917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.892585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.991599] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.997860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.008587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.047989] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.061892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.089863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.401535] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.407791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.417868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/20 17:39:10 executing program 1: 2018/04/20 17:39:10 executing program 0: 2018/04/20 17:39:10 executing program 6: r0 = memfd_create(&(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='Z2\t'], 0x3) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000240), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000007060804002000fffc0c6565643b799365195f1b76"], 0x1000) 2018/04/20 17:39:10 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000080)=""/182) 2018/04/20 17:39:10 executing program 4: 2018/04/20 17:39:10 executing program 2: 2018/04/20 17:39:10 executing program 5: 2018/04/20 17:39:10 executing program 3: 2018/04/20 17:39:11 executing program 5: 2018/04/20 17:39:11 executing program 4: 2018/04/20 17:39:11 executing program 2: open(&(0x7f0000000000)='./bus\x00', 0x100000141842, 0x0) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f0000000480)='./bus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x1000, &(0x7f0000000740)=ANY=[]) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000140), 0x0, 0x55c3}], 0x0, &(0x7f0000000780)=ANY=[]) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = dup(r0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000001040)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000030000000000000000003800000000000000000000000000200000000000000000000040d83caf7d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d1864005809de0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000009dc0f4f800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x200) sendfile(r1, r2, &(0x7f0000000280), 0x8000fffffffe) 2018/04/20 17:39:11 executing program 1: mprotect(&(0x7f0000032000/0x1000)=nil, 0x1000, 0x5) setitimer(0x0, &(0x7f0000032fe0)={{}, {0x0, 0x2710}}, 0x0) 2018/04/20 17:39:11 executing program 3: r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000180)=@req3={0x1007, 0x0, 0x2, 0x5}, 0x1c) sendmsg(r0, &(0x7f0000000000)={&(0x7f00004aeb5c)=@generic={0x10000000001e, "02ed01000000000000000001e527cc573c5bf86c483700c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f9b1ff010003000024e7af50dd0700000000000000e3ad316a19830000000000000006cb24281e2780e503000076c3979ac40023bd07020078a1dfd300881a8365b186827436"}, 0x80, &(0x7f0000447ff0), 0x0, &(0x7f00008b2000)}, 0x0) 2018/04/20 17:39:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000402ff2)={&(0x7f0000ce3fe0)={0x18, 0x2, 0x1, 0x1, 0x0, 0x0, {}, [@nested={0x4, 0x1}]}, 0x18}, 0x1}, 0x0) 2018/04/20 17:39:11 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet(r0, &(0x7f0000ac0fbb)="c4", 0x1, 0x0, &(0x7f00006e2000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f000056effc), 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0xac, "733a3e91428b095b20f5f66c30b9a1ea3d6872acd2551abd2d07c0015970e814898514fd654ea518a4e40ee68e5e524e9bd5c7795a19e201e01bdb9ca7be99121a4c01a23279af9a87ef29c5fa67576e4186e2e1ab46d13b184e5a695ff970ecdd5b9f01b95ac7a74f133cb923f0777c219acfd45c021c7853fb800fc67ed7a3288eb67ecb4335c2d25ce15e5e0b6897afdde149dbe7dfdac79226bdbc1cb2569f979b531d27addadd65faea"}, &(0x7f0000000100)=0xb4) [ 69.400418] ================================================================== [ 69.407978] WARNING: memcpy-param-overlap in generic_perform_write+0x4c6/0x990 [ 69.415470] __msan_memcpy(ffff8801652dd200, ffff8801652dd000, 3584) [ 69.421972] CPU: 0 PID: 5806 Comm: syz-executor2 Not tainted 4.16.0+ #84 [ 69.428837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.438212] Call Trace: [ 69.440846] dump_stack+0x185/0x1d0 [ 69.444544] __msan_memcpy+0x90/0x1f0 [ 69.448398] ================================================================== [ 69.455767] BUG: KMSAN: uninit-value in kernel_text_address+0x248/0x3a0 [ 69.462517] CPU: 0 PID: 5806 Comm: syz-executor2 Not tainted 4.16.0+ #84 [ 69.469349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.478702] Call Trace: [ 69.481301] dump_stack+0x14a/0x1d0 [ 69.484939] ? kernel_text_address+0x248/0x3a0 [ 69.489524] kmsan_report+0x142/0x240 [ 69.493333] __msan_warning_32+0x6c/0xb0 [ 69.497412] kernel_text_address+0x248/0x3a0 [ 69.501826] ? iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 69.507460] ? iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 69.513087] __kernel_text_address+0x34/0xe0 [ 69.517503] ? iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 69.523129] show_trace_log_lvl+0x954/0x1030 [ 69.527546] ? iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 69.533176] ? iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 69.538808] show_stack+0xfc/0x150 [ 69.542342] ? print_worker_info+0x1b0/0x660 [ 69.546745] dump_stack+0x185/0x1d0 [ 69.550390] __msan_memcpy+0x90/0x1f0 [ 69.554194] iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 69.559735] ? block_write_begin+0x1d1/0x3a0 [ 69.564158] generic_perform_write+0x4c6/0x990 [ 69.568740] __generic_file_write_iter+0x43b/0x990 [ 69.573673] blkdev_write_iter+0x3a8/0x5f0 [ 69.577924] ? __blkdev_put+0xc80/0xc80 [ 69.581903] do_iter_readv_writev+0x7bb/0x970 [ 69.586417] ? __blkdev_put+0xc80/0xc80 [ 69.590391] do_iter_write+0x30d/0xd40 [ 69.594267] ? kmsan_set_origin_inline+0x6b/0x120 [ 69.599104] ? __blkdev_put+0xc80/0xc80 [ 69.603060] vfs_iter_write+0x118/0x180 [ 69.607025] iter_file_splice_write+0xbc3/0x1710 [ 69.611772] ? splice_from_pipe+0x2c0/0x2c0 [ 69.616071] ? splice_from_pipe+0x2c0/0x2c0 [ 69.620375] direct_splice_actor+0x19b/0x200 [ 69.624773] splice_direct_to_actor+0x764/0x1040 [ 69.629509] ? do_splice_direct+0x540/0x540 [ 69.633815] ? security_file_permission+0x28f/0x4b0 [ 69.638812] ? rw_verify_area+0x35e/0x580 [ 69.642938] do_splice_direct+0x335/0x540 [ 69.647066] do_sendfile+0x1067/0x1e40 [ 69.650939] SYSC_sendfile64+0x1b3/0x300 [ 69.654984] SyS_sendfile64+0x64/0x90 [ 69.658772] do_syscall_64+0x309/0x430 [ 69.662640] ? SYSC_sendfile+0x320/0x320 [ 69.666682] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 69.671860] RIP: 0033:0x455379 [ 69.675040] RSP: 002b:00007fd6260b5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 69.682724] RAX: ffffffffffffffda RBX: 00007fd6260b66d4 RCX: 0000000000455379 [ 69.689977] RDX: 0000000020000280 RSI: 0000000000000016 RDI: 0000000000000015 [ 69.697235] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 69.704482] R10: 00008000fffffffe R11: 0000000000000246 R12: 00000000ffffffff [ 69.711737] R13: 00000000000004cf R14: 00000000006fa408 R15: 0000000000000000 [ 69.718992] [ 69.720600] Local variable description: ----blocks@do_mpage_readpage [ 69.727065] Variable was created at: [ 69.730767] do_mpage_readpage+0x11c/0x3090 [ 69.735066] mpage_readpages+0x5bb/0x9b0 [ 69.739097] ================================================================== [ 69.746428] Disabling lock debugging due to kernel taint [ 69.751856] Kernel panic - not syncing: panic_on_warn set ... [ 69.751856] [ 69.759211] CPU: 0 PID: 5806 Comm: syz-executor2 Tainted: G B 4.16.0+ #84 [ 69.767324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.776652] Call Trace: [ 69.779221] dump_stack+0x14a/0x1d0 [ 69.782829] panic+0x39d/0x940 [ 69.786021] ? kernel_text_address+0x248/0x3a0 [ 69.790591] kmsan_report+0x238/0x240 [ 69.794369] __msan_warning_32+0x6c/0xb0 [ 69.798414] kernel_text_address+0x248/0x3a0 [ 69.802809] ? iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 69.808413] ? iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 69.814038] __kernel_text_address+0x34/0xe0 [ 69.818429] ? iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 69.824041] show_trace_log_lvl+0x954/0x1030 [ 69.828451] ? iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 69.834059] ? iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 69.839665] show_stack+0xfc/0x150 [ 69.843186] ? print_worker_info+0x1b0/0x660 [ 69.847573] dump_stack+0x185/0x1d0 [ 69.851181] __msan_memcpy+0x90/0x1f0 [ 69.854962] iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 69.860397] ? block_write_begin+0x1d1/0x3a0 [ 69.864786] generic_perform_write+0x4c6/0x990 [ 69.869349] __generic_file_write_iter+0x43b/0x990 [ 69.874260] blkdev_write_iter+0x3a8/0x5f0 [ 69.878501] ? __blkdev_put+0xc80/0xc80 [ 69.882452] do_iter_readv_writev+0x7bb/0x970 [ 69.886932] ? __blkdev_put+0xc80/0xc80 [ 69.890883] do_iter_write+0x30d/0xd40 [ 69.894760] ? kmsan_set_origin_inline+0x6b/0x120 [ 69.899586] ? __blkdev_put+0xc80/0xc80 [ 69.903547] vfs_iter_write+0x118/0x180 [ 69.907507] iter_file_splice_write+0xbc3/0x1710 [ 69.912250] ? splice_from_pipe+0x2c0/0x2c0 [ 69.916553] ? splice_from_pipe+0x2c0/0x2c0 [ 69.920863] direct_splice_actor+0x19b/0x200 [ 69.925253] splice_direct_to_actor+0x764/0x1040 [ 69.929990] ? do_splice_direct+0x540/0x540 [ 69.934294] ? security_file_permission+0x28f/0x4b0 [ 69.939291] ? rw_verify_area+0x35e/0x580 [ 69.943431] do_splice_direct+0x335/0x540 [ 69.947571] do_sendfile+0x1067/0x1e40 [ 69.951453] SYSC_sendfile64+0x1b3/0x300 [ 69.955504] SyS_sendfile64+0x64/0x90 [ 69.959283] do_syscall_64+0x309/0x430 [ 69.963150] ? SYSC_sendfile+0x320/0x320 [ 69.967192] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 69.972362] RIP: 0033:0x455379 [ 69.975543] RSP: 002b:00007fd6260b5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 69.983227] RAX: ffffffffffffffda RBX: 00007fd6260b66d4 RCX: 0000000000455379 [ 69.990474] RDX: 0000000020000280 RSI: 0000000000000016 RDI: 0000000000000015 [ 69.997724] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 70.004974] R10: 00008000fffffffe R11: 0000000000000246 R12: 00000000ffffffff [ 70.012227] R13: 00000000000004cf R14: 00000000006fa408 R15: 0000000000000000 [ 70.019985] Dumping ftrace buffer: [ 70.023503] (ftrace buffer empty) [ 70.027193] Kernel Offset: disabled [ 70.030794] Rebooting in 86400 seconds..